
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/198245a4-9b6f-3550-b92a-d7f97f0861b5.roa
File: 198245a4-9b6f-3550-b92a-d7f97f0861b5.roa (raw, json)
Hash identifier: IE8S78ZZob0fenCSph0cHVjHLtWmIWxvABt6R8ITaY0=
Subject key identifier: DC:30:B6:6E:A5:AB:15:1F:8A:56:D7:E2:BF:B9:0A:C4:36:B0:AB:9A
Certificate issuer: /CN=d498318a-7059-42be-9b60-234aedba5e34
Certificate serial: 010D0C9F4328584D32D4D2F6EC5AADB377DABAC0
Authority key identifier: 1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/198245a4-9b6f-3550-b92a-d7f97f0861b5.roa
Signing time: Tue 17 Mar 2026 13:00:41 +0000
ROA not before: Tue 17 Mar 2026 13:00:41 +0000
ROA not after: Mon 15 Jun 2026 13:00:41 +0000
asID: 0
IP address blocks: 192.219.216.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:32:d4:d2:f6:ec:5a:ad:b3:77:da:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d498318a-7059-42be-9b60-234aedba5e34
Validity
Not Before: Mar 17 13:00:41 2026 GMT
Not After : Jun 15 13:00:41 2026 GMT
Subject: CN=ec567889-484f-4438-8bdf-bd522b6e347b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c4:d7:dc:a4:d8:76:8a:71:55:a7:a5:94:52:
91:3d:7b:68:f8:37:a0:d7:c3:b0:c2:98:58:66:5d:
92:c6:44:fe:48:80:56:94:db:08:fc:33:9d:ed:db:
b0:33:35:41:b6:33:64:c9:19:7a:d2:55:95:f3:ed:
ce:db:a7:07:dd:9e:ec:6c:cd:9f:5d:21:8a:3d:b0:
56:28:89:88:d0:2c:1a:e6:45:66:83:a8:b9:e2:d4:
6b:ef:30:e9:80:e4:86:d7:40:ab:f6:b5:6d:c5:88:
c5:e6:cc:c8:71:7b:f0:9d:30:57:63:71:4e:21:a3:
9c:86:a4:70:2c:94:fb:8a:e7:85:2e:26:41:c8:f8:
bb:ea:ba:82:2a:6f:4a:52:9e:0f:d4:28:ad:b9:44:
01:fc:ad:01:1c:3f:b3:49:b9:a4:b5:07:0b:9a:c3:
b3:81:ce:1b:47:c1:23:e9:6a:24:d5:d3:14:ba:42:
97:38:b2:2f:bb:80:61:a5:c4:33:c2:49:d4:9e:bd:
fb:54:c2:82:de:40:a0:1b:db:36:2b:0d:01:3d:fe:
ab:e6:bb:49:71:e6:eb:b5:20:9d:58:2f:36:4b:f9:
6d:ee:ae:6c:f4:93:b2:96:28:39:09:4b:96:6b:77:
49:70:43:61:9e:2b:83:34:7b:23:e1:c0:2c:4f:5b:
f3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:30:B6:6E:A5:AB:15:1F:8A:56:D7:E2:BF:B9:0A:C4:36:B0:AB:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/198245a4-9b6f-3550-b92a-d7f97f0861b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34/d498318a-7059-42be-9b60-234aedba5e34.crl
X509v3 Authority Key Identifier:
keyid:1B:58:B3:AC:48:09:D4:84:9D:3A:66:E0:5F:08:9C:D2:10:C1:11:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d498318a-7059-42be-9b60-234aedba5e34.cer
sbgp-ipAddrBlock: critical
IPv4:
192.219.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f8:ec:76:2c:a3:14:df:d1:5b:31:a3:a2:a2:55:56:f9:46:
d7:28:f8:d9:9f:e4:56:18:b7:03:2a:d1:5e:81:6f:51:df:64:
e8:85:d9:a9:92:db:61:81:a3:84:85:2f:8f:be:f4:15:05:ad:
ca:6a:5c:63:98:ef:3b:2c:8c:35:87:66:a9:e7:b4:e8:33:82:
f7:9b:0f:be:7c:5c:2b:02:0d:92:a1:80:a4:51:61:74:3d:05:
22:a3:89:7c:45:51:6c:76:80:0d:2d:d6:66:55:4e:bd:08:8b:
9b:55:e7:46:97:52:ac:48:b0:7c:f2:9e:a9:8c:70:6a:d2:2e:
e6:15:34:07:f0:e5:f5:1f:a1:fb:0f:32:d7:39:5a:64:87:b6:
f8:b3:8d:19:7f:d0:4c:44:dd:01:d3:62:56:d4:b4:ff:48:f8:
a0:85:83:de:ce:d5:fe:e6:12:e7:3d:d5:99:6f:5a:d4:54:fa:
56:00:91:31:34:58:67:10:40:05:dc:9b:9c:69:5c:0e:36:bb:
dc:46:ee:0c:ea:ae:6a:4a:88:d7:a3:39:0d:3b:b5:7c:82:3a:
f6:85:5f:f5:6b:ab:b2:41:96:2d:9d:53:86:28:03:81:18:64:
48:17:3a:2f:38:0c:b2:f1:66:31:95:27:38:f3:8a:1e:f4:55:
21:0e:3e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:07:18 2026 by rpki-client